GuardScan Security Scanner

# Security Fix Guide for my-startup-app
Fix 5 security vulnerabilities in priority order.

2 Critical 2 High 1 Medium

---

## 1. Hardcoded Stripe Key (Critical)
src/services/stripe.ts:12

const STRIPE_KEY = 'sk_live_4eC39...'

const STRIPE_KEY = process.env.STRIPE_SECRET_KEY

---

## 2. SQL Injection (Critical)
src/db/users.ts:47

db.query(`SELECT * FROM users WHERE id = ${userId}`)

db.query('SELECT * FROM users WHERE id = $1', [userId])

---

*Just tell Claude: "Read GUARDSCAN_FIXES.md and fix all issues"*